Configuring Tunneling Protocols And Options - Cisco CVPN3015-NR - VPN Concentrator 3015 Getting Started

Chapter 3 Using the VPN Concentrator Manager for Quick Configuration

Configuring Tunneling Protocols and Options

The Manager displays the Configuration | Quick | Tunneling screen.
Figure 3-6
You must enable at least one of these protocols for the device to function as a VPN device. PPTP and
L2TP are popular with Microsoft Windows-based clients, and the VPN 3000 Client uses IPSec.
WebVPN provides remote access over the Internet, and does not require either a software or hardware
client. To enable, disable, and configure virtual private network tunneling protocols and encryption
options on the VPN Concentrator, follow these steps:
Check PPTP to enable Point-to-Point Tunneling Protocol. (This box is checked by default.)
Step 1
If you enable PPTP, click one of the radio buttons to select the encryption option:
Step 2
•
•
Check L2TP to enable Layer 2 Tunneling Protocol. (This box is checked by default.)
Step 3
If you enable L2TP, click one of the radio buttons to select the encryption option:
Step 4
•
•
Check IPSec to enable remote-access user connections using Internet Protocol Security protocol. (This
Step 5
box is checked by default.) This option supports only remote-access IPSec connections from the VPN
3000 Client or a similar protocol-compliant client. To configure IPSec LAN-to-LAN connections, see
Configuration | System | Tunneling Protocols | IPSec LAN-to-LAN under regular system configuration.
Step 6 Check WebVPN to enable remote-access user connections via SSL using a web browser or e-mail client.
78-15733-03
Configuration | Quick | Tunneling Screen
Require Encryption—PPTP connections must use Microsoft encryption to encrypt data. This option
requires MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol) and provides
maximum security. During connection setup, clients must agree to use encryption or they will not
be connected.
Don't Require Encryption—PPTP connections may use Microsoft encryption to encrypt data (the
default). During connection setup, clients may or may not agree to use Microsoft encryption; they
will be connected in either case.
Require Encryption—L2TP connections must use Microsoft encryption to encrypt data. This option
requires MS-CHAP and provides maximum security. During connection setup, clients must agree to
use encryption or they will not be connected.
Don't Require Encryption—L2TP connections may use Microsoft encryption to encrypt data (the
default). During connection setup, clients may or may not agree to use Microsoft encryption; they
will be connected in either case.
Configuring Tunneling Protocols and Options
VPN 3000 Series Concentrator Getting Started
3-9